Add Gitea and Caddy deployment configuration (#1)

deploy/compose.yaml

@@ -0,0 +1,49 @@
+# Seat-Back Trivia startup work hub: Gitea behind Caddy on the ssw-590 droplet.
+# Only Caddy publishes host ports. Gitea is reachable only on the private
+# gitea-net network, and its SQLite database lives in the gitea-data volume.
+name: gitea
+
+services:
+  caddy:
+    image: caddy:2.11.4
+    restart: unless-stopped
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
+      - caddy-data:/data
+      - caddy-config:/config
+    networks:
+      - gitea-net
+    depends_on:
+      - gitea
+
+  gitea:
+    image: docker.gitea.com/gitea:1.27.3
+    restart: unless-stopped
+    environment:
+      - USER_UID=1000
+      - USER_GID=1000
+      - GITEA__server__DOMAIN=git.pollefeys.dev
+      - GITEA__server__ROOT_URL=https://git.pollefeys.dev/
+      - GITEA__server__HTTP_PORT=3000
+      - GITEA__server__DISABLE_SSH=true
+      - GITEA__database__DB_TYPE=sqlite3
+      - GITEA__database__PATH=/data/gitea/gitea.db
+      - GITEA__security__INSTALL_LOCK=true
+      - GITEA__service__DISABLE_REGISTRATION=true
+    volumes:
+      - gitea-data:/data
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+    networks:
+      - gitea-net
+
+networks:
+  gitea-net:
+
+volumes:
+  gitea-data:
+  caddy-data:
+  caddy-config: